Unsupervised anomaly detection framework for multiple-connection based network intrusions

In this dissertation, we propose an effective and efficient online unsupervised anomaly detection framework. The framework consists of new anomalousness metrics, named IP Weight, and a new hybrid clustering algorithm, named I-means. IP Weight metrics provide measures of anomalousness of IP packet fl...

Full description

Bibliographic Details
Main Author: Lu, Wei
Other Authors: Traoré, Issa
Language:English
en
Published: 2009
Subjects:
Online Access:http://hdl.handle.net/1828/1949